forked from extern/shorewall_code
Make Ed Suominen's Patch Console-friendly
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3415 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
fc29c70f38
commit
eb68788e8f
@ -84,24 +84,24 @@
|
||||
# SOURCE Source of the packet. A comma-separated list of
|
||||
# interface names, IP addresses, MAC addresses and/or
|
||||
# subnets for packets being routed through a common path.
|
||||
# For example, all packets for connections masqueraded to
|
||||
# eth0 from other interfaces can be matched in a single rule
|
||||
# with several alternative SOURCE criteria. However, a
|
||||
# connection whose packets gets to eth0 in a different way,
|
||||
# e.g., direct from the firewall itself, needs a different
|
||||
# rule.
|
||||
# For example, all packets for connections masqueraded
|
||||
# to eth0 from other interfaces can be matched in a
|
||||
# single rule with several alternative SOURCE criteria.
|
||||
# However, a connection whose packets gets to eth0 in a
|
||||
# different way, e.g., direct from the firewall itself,
|
||||
# needs a different rule.
|
||||
#
|
||||
# Accordingly, use $FW in its own separate rule for packets
|
||||
# originating on the firewall. In such a rule, the MARK
|
||||
# column may NOT specify either ":P" or ":F" because marking
|
||||
# for firewall-originated packets always occurs in the OUTPUT
|
||||
# chain.
|
||||
# Accordingly, use $FW in its own separate rule for
|
||||
# packets originating on the firewall. In such a rule,
|
||||
# the MARK column may NOT specify either ":P" or ":F"
|
||||
# because marking for firewall-originated packets
|
||||
# always occurs in the OUTPUT chain.
|
||||
#
|
||||
# MAC addresses must be prefixed with "~" and use
|
||||
# "-" as a separator.
|
||||
#
|
||||
# Example: ~00-A0-C9-15-39-78
|
||||
#
|
||||
|
||||
# DEST Destination of the packet. Comma separated list of
|
||||
# IP addresses and/or subnets. If your kernel and
|
||||
# iptables include iprange match support, IP address
|
||||
|
Loading…
Reference in New Issue
Block a user